Source: ISO 27005:2022
ISO 27005 is the international standard that describes how to conduct an information security risk assessment in accordance with the requirements of ISO 27001. Risk assessments are one of the most important parts of an organisation's ISO 27001 compliance project.